Analysis
- geolocation tags
asiadelhiinindia - user interaction
yes - max time kernel
0s - max time network
629s - platform
ubuntu-24.04_amd64 - resource
ubuntu2404-amd64-20250619-en - resource tags
arch:amd64arch:i386image:ubuntu2404-amd64-20250619-enkernel:6.8.0-31-genericlocale:en-usos:ubuntu-24.04-amd64system - submitted
08/07/2026, 14:23
Static task
static1
Behavioral task
behavioral1
Sample
discord.tar.gz
Resource
ubuntu2404-amd64-20260126-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
discord.tar
Resource
ubuntu2404-amd64-20260127-en
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
Discord/discord
Resource
ubuntu2404-amd64-20260126-en
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
Discord/discord.desktop
Resource
ubuntu2404-amd64-20250619-en
2 signatures
900 seconds
Behavioral task
behavioral5
Sample
Discord/discord.png
Resource
ubuntu2404-amd64-20260126-en
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
Discord/postinst.sh
Resource
ubuntu2404-amd64-20260127-en
4 signatures
900 seconds
Behavioral task
behavioral7
Sample
Discord/updater_bootstrap
Resource
ubuntu2404-amd64-20260126-en
3 signatures
900 seconds
General
- Target Discord/discord.desktop
- Size 346B
- Sample260708-rqnahsgt7w
- SHA256 811085bd10e9bc67453a8e6fe45ef8e8317daf4f6a316c394f9d98228261b02d
- MD5 97a5b45a33101941153803fa8872d9f6
- SHA1 c944b418840d81046aa3b9bda398a3e8e1aef8dd
- SHA512 2b37903cadd324235403a3680d575fdefaea409c632ae57267307dfae71d787d0e68d3286d7fbea921dea6486a47f6c7cce71ff79d1bf024751ee1422a983330
- TLSH T16CE026CF639C00735A9A5896E3C1B7899301061C289FF87ED4CE925E124D882A2B8F4B
- MD5 SHA1 SHA512 TLSH
Score
4/10
Malware Config
Signatures
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself gmain 2036 gtk-launch -
description ioc Process File opened for reading /proc/filesystems gtk-launch